AMENDMENTS TO THE CLAIMS 

This listing of the claims shall replace all prior versions and listing of the claims in 
this application: 

1 . (Currently amended) A method of recovery from a data storage system failure in 
a data storage system having a host computer writing data to a first storage unit 
associated with a first storage controller synchronously mirroring the data to a second 
storage unit associated with a second storage controller asynchronously mirroring the 
data to a third storage unit, the method comprising: 

asynchronously mirroring the data to the third storage unit, comprising: 
creating a first map associated with the second storage unit 

identifying tracks storing mirrored data which has been received on the 

second storage unit by the synchronous mirroring of the data from the first 

storage unit: and 

continuously transmitting batches of the mirrored data on tracks 

identified by the first map from the second storage unit to the third storage 

unit: 

detecting a failure associated with the first storage unit; 
writing data updates directly to the second storage unit; 
correcting the failure associated with the first storage unit; and 
synchronously mirroring the data updates from the second storage unit to 
the first storage unit , comprising: 

creating a second map associated with the second storage unit 
identifying the tracks storing changed data from a point in time where the 
host computer began writing directly to the second storage unit; 

copying to the first storage unit the changed data on the tracks 
identified by the second map, comprising: 

preserving a copy of the second map at a point in time at 

which copying the changed data to the first storage unit begins; 
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re-setting the second map to a clear state and thereafter 
identifying the tracks containing the changed data in the second 
map; 

comparing the first map to the second map and adding the 
identity of the tracks containing the data updates, as identified by 
the first map but not identified by the second map, to the second 
map; 

comparing the preserved copy of the second map to the first 
map and adding the identity of the tracks containing the changed 
data, as identified by the preserved copy of the second map but not 
identified by the first map, to the first map; and 

copying the data updates on the tracks then identified by the 
first map from the second storage unit to the first storage unit; and 
synchronously mirroring to the first storage unit further changed 
data written to the second storage unit by the host computer until a full 
duplex state between the first storage unit and the second storage unit is 
reached . 

2. (Unchanged) The method of claim 1 further comprising suspending the 
synchronous mirroring of the data from the first storage unit to the second storage unit 
upon detection of the failure associated with the first storage unit. 

3. (Unchanged) The method of claim 1 further comprising suspending the 
asynchronous mirroring of the data updates from the second storage unit to the third 
storage unit while synchronously mirroring the data updates from the second storage 
unit to the first storage unit. 

4. (Unchanged) The method of claim 3 further comprising: 

re-establishing the synchronous mirroring of the data from the first storage 
unit to the second storage unit; 
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resuming the writing of the data from the host computer to the first storage 
unit; and 

re-establishing the asynchronous mirroring of data from the second 
storage unit to the third storage unit. 

5-7. (Cancelled) 

8. (Unchanged) The method of claim 6 wherein the synchronous mirroring to the 
first storage unit of the further updates written to the second storage unit by the host 
computer comprises: 

continuing to identify the tracks having the data updates with the first map 
and with the second map; and 

synchronously copying the data updates on the tracks identified by the 
first map from the second storage unit to the first storage unit. 

9. (Unchanged) The method of claim 6 further comprising the following steps when 
the full duplex state between the first storage unit and the second storage unit is 
reached: 

terminating the use of the first map to identify the tracks associated with 
the second storage unit storing the data updates; and 

continuing to use the second map to identify the tracks associated with the 
second storage unit storing changed data. 

1 0. (Unchanged) The method of claim 6 wherein the writing of the data by the host 
computer is quiesced after the full duplex state between the first storage unit and the 
second storage unit is reached. 

1 1 . (Amended) The method of claim §-4_wherein re-establishing the asynchronous 
mirroring of the data from the second storage unit to the third storage unit comprises: 
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comparing the second map to the first map and adding the identity of the 
tracks containing the changed data, as identified by the second map but not 
identified by the first map, to the first map; and 

asynchronously mirroring the data updates on the tracks then identified by 
the first map from the second storage unit to the third storage unit. 

12. (Currently amended) A system for copying stored data and having the ability to 
recover from a failure, comprising: 

a second storage controller associated with a second storage unit, the second storage 
controller synchronously receiving mirrored data from a first storage controller 
associated with a host computer and a first storage unit, the second storage controller 
further asynchronously mirroring the data to a third storage controller associated with a 
third storage unit , the second storage controller comprising: 

a copy of the second map made at a point in time the synchronous 
mirroring of the data updates to the first storage unit begins: and 
the second map set to a clear state at the point in time the 
synchronous mirroring of the data updates to the first storage unit begins 
and thereafter identifying the tracks containing new changed data : 
means for detecting a failure associated with the first storage unit; 
means for writing data updates from the host computer to the second 
storage controller upon detection of the failure associated with the first storage 
unit; 

means for synchronously mirroring the data updates from the second 
storage unit to the first storage unit upon correction of the failure associated with 
the first storage unit. 

13. (Unchanged) The system for copying stored data of claim 12 wherein the 
second storage controller further comprises a first map identifying tracks storing the 
mirrored data which has been received on the second storage unit by the synchronous 
mirroring of the data from the first storage unit. 
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14. (Unchanged) The system for copying stored data of claim 12 wherein the 
second storage controller further comprises a second map identifying the tracks storing 
changed data from a point in time where the host computer begins writing the data 
updates directly to the second storage unit. 

15. (Cancelled) 

16. (Currently amended) The system for copying stored data of claim 45-12 wherein 
the second storage controller further comprises means for comparing the tracks 
identified by the first map to the tracks identified by one of the second map, and the 
preserved copy of the second map. 

17. (Unchanged) The system for copying stored data of claim 16 wherein the means 
for synchronously mirroring the data updates from the second storage unit to the first 
storage unit causes the following steps to be taken: 

comparing the first map to the re-set second map and adding the identity 
of the tracks containing the data updates, as identified by the first map but not 
identified by the second map, to the second map; 

comparing the preserved copy of the second map to the first map and 
adding the identity of the tracks containing the changed data, as identified by the 
preserved copy of the second map but not identified by the first map, to the first 
map; and 

copying the data updates on the tracks then identified by the first map 
from the second storage unit to the first storage unit. 

18. (Unchanged) The system for copying stored data of claim 12 wherein the 
second storage controller further comprises means for terminating the asynchronous 
mirroring of the data to the third storage controller associated with the third storage unit 
upon the commencement of the synchronous mirroring of the data updates from the 
second storage unit to the first storage unit. 



6 



19. (Unchanged) The system for copying stored data of claim 18 wherein the 
second storage controller further comprises: 

means for re-establishing the asynchronous mirroring of the data to the 
third storage controller associated with the third storage unit; and 

means for synchronizing the data stored on the third storage unit with the 
data stored on the second storage unit. 

20-30. (Cancelled) 
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